Senior PAM Engineer – Delinea Cloud

We are looking for a Senior Delinea Cloud PAM Specialist to architect, deploy, and operationalize our cloud-native Privileged Access Management platform. In this role, you will be responsible for scaling the Delinea Cloud Platform, extending privileged access controls across human and machine identities. You will manage Delinea Secret Server Cloud, DevOps Secrets Vault (DSV) for high-velocity non-human credentials, and Privilege Control for Servers / Cloud Suite (enforcing least privilege, host-based elevation, and AD Bridging across Unix, Linux, and Windows).

Responsibilities

Architect, deploy, and operationalize cloud-native Privileged Access Management platform; Scale Delinea Cloud Platform and extend privileged access controls across human and machine identities; Manage Delinea Secret Server Cloud, DevOps Secrets Vault (DSV), and Privilege Control for Servers / Cloud Suite; Implement and operate DSV for high-velocity machine-to-machine, Kubernetes, and CI/CD pipeline secrets; Deploy and manage Delinea agents to enforce Zero Trust, Just-In-Time access, and privilege elevation on Unix/Linux/Windows; Integrate Delinea Cloud with Entra ID, Okta, Ping, SIEM, and ITSM platforms; Manage Secret Server Cloud operations including vaulting, password rotation, discovery, web launchers, and session recordings; Oversee dynamic secret generation, PKI/SSH short-lived certificates, API keys, and service account rotations; Monitor platform health and serve as tier-3 SME for PAM incidents; Write PowerShell, Python, or Bash scripts using Delinea Cloud REST APIs and CLI tools for automation and compliance auditing; Maintain forensic-level audit trails and reporting for SOC 2, ISO 27001, PCI-DSS, HIPAA; Create engineering documentation, break-glass procedures, and developer onboarding guides for DSV

Requirements

10+ years in Identity & Access Management (IAM) with a strong focus on enterprise Privileged Access Management (PAM); 4+ years of hands-on experience implementing and operating Delinea Cloud (Secret Server Cloud); Demonstrated hands-on experience with Delinea DevOps Secrets Vault (DSV) OR Delinea Server PAM / Cloud Suite / Privilege Control for Servers (Unix, Linux, Windows); Deep understanding of Linux/Unix security (PAM modules, Sudoers, SSH configuration, AD joining/bridging via Delinea agents); Knowledge of DevOps toolchains (Kubernetes, Terraform, Ansible, CI/CD pipelines) and API secrets management; Scripting experience in Python, PowerShell, or Bash utilizing REST APIs; Identity protocols: SAML, OAuth, OIDC, Kerberos, LDAP, Active Directory, Entra ID; Bachelor’s degree in Cybersecurity, Computer Science, IT, or equivalent practical experience

Nice to have

Delinea Certified Secret Server Platform Engineer / Cloud Suite Specialist (Highly Desirable)

Benefits

Flexible Work (hybrid schedule with at least half time in office or field)